lov-install-zenmux-api

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's workflow explicitly enforces secret isolation, instructing the agent to read keys only from authorized sources and prohibiting their storage in source code, logs, or command history.
  • [SAFE]: The profile_store.py script implements a proactive security filter that prevents the recording of sensitive fields (e.g., api_key, password, token) into the persistent user profile, reducing the risk of accidental credential exposure.
  • [SAFE]: The utility scripts included with the skill use established secure practices, including yaml.safe_load() for parsing configuration files and atomic write operations to prevent data corruption or race conditions during profile updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 09:48 AM
Security Audit — agent-trust-hub — lov-install-zenmux-api